"Why not just use Coreboot?"

[mjg59]

Why not just avoid the entire Secure Boot problem by using Coreboot? Because the reason we have the Secure Boot problem is because Microsoft's Windows 8 certification requirements mean vendors have to ship a UEFI implementation with Secure Boot. You could satisfy that by using Coreboot with a Tiano payload, but it'll still have Secure Boot enabled so you still have the same set of problems. But maybe you could just reflash your system with Coreboot? No, because another part of the requirements states that all firmware updates have to be cryptographically signed now. The only way to reflash will be to attach a flash programmer directly to your motherboard.

So why not just use Coreboot? Because it doesn't help solve this problem in any way.

Comments

EFI is horrible, just see how much so.

[(Anonymous)]

I would encourage everyone of a technical bent to watch this talk which explains why UEFI is just horrid on so many levels, not least of which it being technically incompetent of doing the job it was supposed to do.

http://www.youtube.com/watch?v=V2aq5M3Q76U

Re: EFI is horrible, just see how much so.

[mjg59]

Yup, I'm pretty familiar with that presentation.

Re: EFI is horrible, just see how much so.

[(Anonymous)]

I don’t watch talks – they’re usually a huge waste of time considering my reading speed, *if* I understand them at all, considering the crass difference between my reading/writing and talking/listening English language skills (English is neither my first nor my second human language, after all).

So, please get us standalone slides, a paper, a blogposting, whatever instead. A medium allowing us to peruse the content at our own speed and by plain text.

(Not even *trying* OpenID this time…)